Missing SRI hash
So time to check for the XSS implications: maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
OK for Results from scanning URL: -http://maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
Number of sources found: 0
Number of sinks found: 0
But what about the next: Results from scanning URL: -https://octavia.team/uploads/javascript_core/global_global_core.js.b986a92850ef96bf3b2c71af4a82b511.js?v=501c4bfea7
Number of sources found: 4
Number of sinks found: 16
And then: Results from scanning URL: -https://octavia.team/uploads/javascript_global/root_front.js.1a212e03bd305e7bc648ae5fda8f5f08.js?v=501c4bfea7
Number of sources found: 171
Number of sinks found: 197
So it depends where you scan it and where it has access... ;D So we have a meagre F rated suspended website ranking.